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Top Stories 

• Officials reported September 14 that businesses and surrounding streets in Philadelphia, 
Pennsylvania, were evacuated September 12 after a water main ruptured and poured 15 
million gallons of water to surrounding areas. - WPVI 6 Philadelphia (See item 19 ) 

• California firefighters continued to battle 2 large wildfires September 14 which combined, 
have burned over 95 square miles, destroyed more than 1,135 homes, businesses, and left 1 
person dead, and displaced 23,000 people. - Associated Press (See item 21 ) 

• Four inmates died and 4 others were hospitalized following a September 12 disturbance at 
the privately-owned Cimarron Correctional Facility in Oklahoma. - Tulsa World (See item 
27 ) 

• Officials reported September 13 that a 3-alarm fire at an apartment complex in Maryland, 
displaced 88 residents and damaged 30 apartment units. - WTTG 5 Washington, D.C (See 
item 29) 
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Energy Sector 



1. September 13, Cliffview Pilot - (New Jersey) Evacuations lifted, residents return 
after explosion, fire at Waldwick substation. Evacuation orders for residents were 
lifted nearly 8 hours after an explosion and oil fire at a PSE&G-owned Hopper Avenue 
switching station in Waldwick September 13 that was caused by equipment failure. 
Crews de-energized the station and doused flames with foam. 

Source: http://cliffviewpilot.com/evacuations-lifted-residents-retum-after-explosion- 
fire-at-waldwick-substation/ 

2. September 11, Casper Star-Tribune - (Wyoming) Chesapeake Energy works to quell 
Douglas well fire as concerns mount. Two of six Chesapeake Energy-owned oil wells 
near Douglas, Wyoming, were capped September 1 1 after Wyoming Oil and Gas 
officials found that the company had been pumping methanol into the affected wells 
before a fire started. An investigation is ongoing and crews are monitoring the air 
around the fire for any particulate matter and volatile organic compounds. 

Source: http://trib.com/business/energv/chesapeake-energv-moves-to-quell-douglas- 
well-fire-as-concerns/article 0b3978el-lda6-5e80-a360-le9d593a28ef.html 



Chemical Industry Sector 

Nothing to report 

Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 

Critical Manufacturing Sector 

3. September 10, U.S. Department of Labor - (Connecticut) Employees of Plainville, 
Connecticut, electroplating company exposed to chemical, mechanical hazards. 
The Occupational Safety and Health Administration announced September 10 that it 
issued Connecticut-based Plainville Plating Co. Inc., 2 repeat and 11 serious citations 
September 2 for exposing employees to dangerous levels of lead and cadmium, and for 
failing to evaluate employee for kl ift operation, among other safety violations during a 
2010 inspection. Proposed fines total $48,304. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=28689 

Defense Industrial Base Sector 

Nothing to report 

Financial Services Sector 

4. September 14, Help Net Security - (International) New malware can make ATMs not 



-2 



give users’ card back. Security researchers from FireEye reported that new ATM 
malware dubbed Suceful has the capability to read all credit and debit card track data, 
data from the card’s microchip, and retain or eject an inserted card on demand. The 
malware can also be controlled via the ATM’s personal identification number (PIN) 
pad and, may disable the device’s alarm and proximity sensors. 

Source: http://www.net-security.org/malware news.php?id=3098 

5. September 13, Attleboro Sun Chronicle - (Rhode Island; Massachusetts; Connecticut) 
Area bank robber dubbed the ‘Teardrop Bandit’ suspected in pair of recent 
heists. East Providence, Rhode Island police arrested a suspect September 1 1 dubbed 
the “Teardrop Bandit” in connection to an August 18 robbery at a People’s Bank 
branch in Milford, Connecticut, and a September 9 robbery at a Citizen’s Bank branch 
in Wareham, Massachusetts. The suspect was recently released from prison for a series 
of bank robberies in New Hampshire and Massachusetts. 

Source: http://www.thesunchronicle.com/news/local news/area-bank-robber-dubbed- 
the-teardrop-bandit-suspected-in-pair/article 500568f7-e70f-5d89-954b- 
22941e2640fa.html 



6. September 12, Southern California City News Service - (California) ‘Bluto Bandit,’ 
suspected in Irvine and other bank robberies, is charged. FBI officials reported that 
a Rancho Cucamonga suspect dubbed the “Bluto Bandit” was arrested and charged 
September 10 in connection to 8 bank robberies across the Los Angeles, Orange, and 
San Bernardino counties between June 10 and August 12. 

Source: http://www.ocregister.com/articles/noriega-682370-bank-robbery.html 

7. September 11, WSAZ 3 Huntington - (West Virginia) At least 100 fake credit cards 
connected to fraud scheme. Authorities in Bourboursville, West Virginia, arrested 4 
individuals they dubbed the “Chinese Mafia” the week of September 7 after finding 
over 100 fake credit cards and merchandise bought using stolen credit card information. 
Officials believe that the suspects, who are all from the New England, are part of a 
larger organized crime ring, and that they skimmed card information using a pocket 
device while working at West Virginia area Chinese restaurants. 

Source: http://www.wsaz.com/home/headlines/Four-Men-Facing-Fraudulent-Schemes- 
Charges-32477007 1 .html 

8. September 11, U.S. Securities and Exchange Commission - (International) SEC 
charges five Arizona residents with stealing millions from investors to fund travel 
and entertainment sprees. The U.S. Securities and Exchange Commission charged 5 
Arizona residents September 1 1 for allegedly defrauding 225 investors out of nearly 
$18 million by promising to use the funds for property acquisition and development in 
Mexico, to operate recycling facilities, and to purchase foreclosed properties for resale, 
while instead using the investments to fund their lifestyle. The suspects lied about the 
prospects and progress of investments and made Ponzi-like payments to investors who 
threatened litigation. 

Source: http ://www . sec . gov/news/pressrelease/20 15-1 90.html 
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9. September 11, Asheboro Courier-Tribune - (International) Three charged in major 
credit scam. Authorities arrested 3 New York men in Randolph County, North 
Carolina, September 4 after finding at least 200 fraudulent credit cards with 
international identifications as well as credit-card embossing equipment at an apartment 
in Randleman. The origin of the credit card numbers is under investigation. 

Source: http://courier-tribune.com/news/local/three-charged-maior-credit-card-scam 



Transportation Systems Sector 

10. September 14, KUSA 9 Denver - (Colorado) Semi carrying wine rear-ends semi 
carrying mean on 1-25. Colorado State Patrol reported September 14 that southbound 
lanes of Interstate 25 near mile marker 250 in Berthoud were closed for several hours 
after a semi-truck carrying wine rear ended another semi-truck carrying meat, causing 1 
vehicle to catch fire. One man was injured and officials expected lanes to reopen after 
clean-up efforts were completed. 

Source: http://www.denverpost.com/news/ci 28809276/semi-accident-closes-sb-i-25- 
berthoud 

11. September 13, KREM 2 Spokane - (Washington) ISP: three dead in Highway 95 
collision. Southbound lanes of Highway 95 in Kootenai County, Idaho, were closed for 
4 hours September 12 while crews cleared the scene of a fatal head-on collision that left 
3 people dead and 1 injured. The cause of the accident remains under investigation. 
Source: http://www.krem.com/storv/news/local/kootenai-county/2015/09/12/isp-three- 
dead-highway-95-collision/7 2158988/ 

12. September 12, FOX 31 Denver - (Colorado) One killed in multivehicle accident on I- 
70. Westbound lanes of Highway 1-70 in Denver were closed for 5 hours September 12 
whiles crews investigated a multi-vehicle collision that killed 1 person. The cause of 
the accident is under investigation. 

Source: http ://kdvr. com/20 1 5/09/ 12/1 -killed-in-multi- vehicle-accident-on-i-70-early- 
saturday-morning/ 

13. September 11, Dallas Morning News - (Texas) Westbound LBJ reopens hours after 
tanker truck overturns near Plano Road. Both directions of LBJ Freeway in Dallas 
were closed for several hours September 1 1 while HAZMAT crews cleared the scene 
after propane or butane fuel spilled from an overturned semi-truck that collided with 
several other vehicles. No serious injuries were reported. 

Source: http://thescoopblog.dallasnews.com/2015/09/lbi-freeway-shut-down-after-18- 
wheeler-overturns-near-plano-road.html/ 

14. September 11, KV1A 7 El Paso - (Texas) El Paso-Carlsbad highway shut down after 
pedestrian killed. Highway 62/180 near mile marker 66 in El Paso, Texas, was shut 
down for several hours September 1 1 while police investigated the death of a woman 
who was found in the middle of the highway. 

Source: http://www.kvia.com/news/el-pasocarlsbad-highway-shut-down-after- 
pedestrian-killed/352220 1 8 
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For additional stories, see items 24 and 25 

Food and Agriculture Sector 

15. September 14, U.S. Food and Drug Administration - (National) Custom Produce 
Sales voluntarily recalls Fat Boy Brand and unlabeled cucumbers because of 
possible health risk. The U.S. Food and Drug Administration reported September 1 1 
that Custom Produce Sales of Parlier, California voluntarily recalled all its cucumbers 
sold under the Fat Boy label and unlabeled cucumbers packaged in a black reusable 
plastic container August 2015 due to potential Salmonella contamination. Fat Boy 
cucumbers were produced in Baja California and distributed nationwide. 

Source: http://www.fda.gov/Safety/Recalls/ucm462154.htm 

16. September 11, U.S. Food and Drug Administration - (National) The One Minute 
Miracle Inc. issues voluntarily nationwide recall of Miracle diet 30 due to presence 
of undeclared phenolphthalein & Miracle Rock 48 due to presence of undeclared 
thiosildenafil. North Miami Beach based- The One Minute Miracle Inc., is voluntarily 
recalling all lots of Miracle Diet 30 capsules and Miracle Rock 48 capsules after an 
FDA analysis revealed that the dietary supplements contained undeclared 
phenolphthalein in Miracle Diet 30 and undeclared thiosildenafil in Miracle Rock 48 
September 11. The products were distributed via Internet sales nationwide. 

Source: http://www.fda.gov/Safetv/Recalls/ucm462131.htm 

17. September 10, U.S. Department of Labor - (New York) Recurring hazards at 
Wegmans Food Markets Inc. bakery in Rochester, New York, injure 2 workers. 
The Occupational Safety and Health Administration cited Wegmans Food Markets Inc., 
September 10 for 3 repeated and 2 serious violations after a recent inspection at the 
store in Rochester, New York, revealed hazardous conditions following two 2015 
incidents in which a crew member lost his fingertips when cleaning an operating 
conveyor and a mechanic sustained first degree bums while attempting to repair a 
valve. Proposed fines total $188,200. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=28680 

Water and Wastewater Systems Sector 

18. September 13, Spectrum - (Utah) Contaminated water prompts alert in industrial 
park. Residents and more than 100 businesses in Fort Pierce Industrial Park were 
issued a boil water advisory September 13 after a routine water quality test revealed the 
presence of fecal coliform bacteria September 12. Authorities replaced the 
contaminated sampling station and flushed the distribution system, and expect the boil 
advisory to lift September 14. 

Source: http://www.thespectrum.com/storv/news/2015/09/13/contaminated-water- 
prompts-boil- water- alert- fort-pearce/7222 1912/ 

19. September 13, WPVI 6 Philadelphia - (Pennsylvania) Cleanup continues after 
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massive water main break in North Philadelphia. Philadelphia Water Department 
officials reported September 14 that businesses and surrounding streets were evacuated 
September 12 after a 48-inch water main ruptured and poured 15 million gallons of 
water to surrounding areas. Clean-up crews were in the process of accessing total 
damages. 

Source: http://www.nbcphiladelphia.com/news/local/Water-Main-Break-48-Inch- 
Tastykake-Building— 327 151591 .html 

Healthcare and Public Health Sector 



20. September 11, Sacramento Business Journal - (California) Sutter Health says former 
employee mishandled patient records. Sutter Health announced September 1 1 that a 
former Sutter Physician Services employee emailed electronic billing documents 
containing the personal and insurance information of 2,582 Sacramento-area patients to 
a personal account without authorization. The health system learned of the April 2013 
breach in August 2015 and found no evidence of misuse regarding the information. 
Source: http://www.biziournals.eom/sacramento/news/2015/09/l 1/sutter-health-says- 
former-employee-mishandled.html 

Government Facilities Sector 

21. September 14, Associated Press - (California) Deadly Northern California wilfire 
incinerates homes. California firefighters continued to battle 2 large wildfires 
September 14 in the State, which combined, have burned over 95 square miles, 
destroyed more than 1,135 homes, businesses, and other structures, prompted 
evacuation orders, and left 1 person dead, and displaced 23,000 people. 

Source: http://www.mercurynews.com/breaking-news/ci 288095 12/valley-fire-rages- 
northern-california-5-percent-contained 

22. September 14, Associated Press - (Washington) School canceled for 4th day as 
Seattle teachers strike. Seattle Public Schools reported that public schools remained 
closed September 14 due to an ongoing teacher strike over salaries, new-hires, overtime 
pay, and supplies. 

Source: http://www.msn.com/en-us/news/us/school-canceled-for-4th-day-as-seattle- 
teachers-strike/ar-AAeg8kb 

23. September 13, KMSP 9 Minneapolis - (Minneapolis) Hill-Murray cancels school 
Monday after power outage. Officials announced that schools in the Hill-Murray area 
of Maplewood, Minneapolis, were cancelled September 14 due to power outages that 
knocked all email and phone communications offline. 

Source: http://www.fox9.com/news/19677329-story 

24. September 13, East Oregonian - (Oregon; Washington) Fire at Washington border 
closes highway, knocks out power. A 9,759-acre wildfire burning on the 
Oregon/Washington border near Wallula forced the closure of Highway 730 for most 
of September 13 and prompted a Level 2 evacuation warning for the Port Kelley and 
Wallula areas. 
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Source: http://www.eastoregonian.com/eo/local-news/20150913/fire-at-washington- 
border-closes-highway-knocks-out-power 

25. September 12, Pasadena Patch; Southern California City News Service - (California) 

Bomb threat prompts east Pasadena DMV evacuation. A Department of Motor 
Vehicles building in east Pasadena was evacuated for 4 hours September 1 1 while 
police investigated and cleared a reported bomb threat. 

Source: http://patch.com/california/pasadena-ca/bomb-threat-prompts-east-pasadena- 
dmv-evacuation 



26. September 11, San Luis Obispo Tribune - (California) San Gabriel Elementary 
School evacuation prompted by threatening letters, suspicious objects. Atascadero 
Unified School District in California announced September 11 that classes at San 
Gabriel Elementary School were cancelled after the school was evacuated and closed 
due to threatening letters found on the campus and a suspicious object that was left on 
the playground. Authorities removed the suspicious object and continue to investigate 
the incident. 

Source: http ://w w w . sanluisobispo .com/20 1 5/09/ 11/3801996 san- gabriel-elementary- 
school.html 



Emergency Services Sector 

27. September 13, Tulsa World - (Oklahoma) Three inmates dead, five hospitalized after 
disturbance at Cushing private prison. Four inmates died and 4 others were 
hospitalized following a September 12 disturbance at the privately-owned Cimarron 
Correctional Facility in Cushing, Oklahoma. The incident was contained to a single 
housing unit and prompted a lockdown of the prison while authorities investigated. 
Source: http://www.tulsaworld.com/news/crimewatch/three-inmates-dead-five- 
hospitalized-after-disturbance-at-cushing-private/article 28725040-5fdl-5ab7-bc52- 
8cac7adlfab6.html 



Information Technology Sector 

28. September 14, Securityweek - (International) Attackers use Google Search Console 
to hide website hacks. Security researchers from Sucuri discovered that cybercriminals 
have been using the Google Search Console to improve spam page search engine 
optimization (SEO) and to hide their presence on hijacked Web sites by receiving 
notification when hacks are detected, and by unverifying legitimate Web site owners. 
Source: http ://www . securityweek.com/attackers-use- goo gle-search-console-hide- 
website-hacks 



For another story, see item 4 
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Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT IS AC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 



Communications Sector 

Nothing to report 

Commercial Facilities Sector 

29. September 13, WTTG 5 Washington, D.C. - (Maryland) 3-alarm apartment fire in 
Temple Hills, Maryland. Prince George’s County Fire Department reported 
September 13 that a 3-alarm fire at an apartment complex in Temple Hills, Maryland, 
displaced 88 residents, affected 3 buildings, and damaged 30 apartment units. Three 
firefighters were treated for injuries and the cause of the fire is under investigation. 
Source: http://www.fox5dc.com/news/19383666-story 

30. September 11, Associated Press - (International) CVS alerts photo site users after 
confirming July data breach. CVS Health Corp., confirmed September 11 that its 
photo Web site was shut down after investigators detected a data breach potentially 
resulting in the theft of some CVS customers’ information July 2015. The photo sites of 
Rite Aid, Costco, and Wal-Mart Canada were also affected in the breach and the 
company expects to contact potentially- affected customers September 11. 

Source: http://www.nbcnews.com/tech/security/cvs-alerts-photo-site-users-after- 
confirming-j ul y-data-breach-n426 126 

31. September 11, WTH1 10 Terre Haute - (Indiana) Officials report nothing found in 
Linton Wal-Mart after bomb threat made. Police authorities reported September 1 1 
that the Wal-Mart in Linton, Indiana, was evacuated and closed while officials searched 
the building after the store manager received a bomb threat and notified police 
authorities. K9 bomb crews were brought to the scene and no suspicious devices were 
found. 

Source: http://wthitv.corn/2015/09/ll/officials-report-nothing-found-in-linton-wal- 
mart-after-bomb-threat-made/ 

32. September 11, KSL 102.7 FM Salt lake City - (Utah) Taylorsville apartment fire 
causes $1.5M in damage; 50 displaced. A 2-alarm fire at Thornhill Apartments in 
Taylorsville, Utah, prompted the evacuation of 100 residents and damaged 20 units 
September 11 while crews extinguished the fire. Damages total $1.5 million and the 
cause of the blaze remains under investigation. 

Source: http://www.ksl.com/?sid=36469333&nid=148&title=tavlorsville-apartment- 
fire-causes- 1 5m-in-damage-50-displaced 

For additional stories, see items 7_and 15 
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Dams Sector 

Nothing to report 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday 
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infrastructure issues. The DHS Daily Open Source Infrastructure Report is archived for 10 days on 
the Department of Homeland Security Web site: http://www.dhs.gov/lPDailyReport 
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Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert. gov . 

Department of Homeland Security Disclaimer 
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personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
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